This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/QGeQymvZy4d0alMI8JSVprd2kZQ.roa File: QGeQymvZy4d0alMI8JSVprd2kZQ.roa (raw, json) Hash identifier: wFdyzFEnOpO52P6qvFoplguvVogKcEjQffWBzRulqcA= Subject key identifier: 40:67:90:CA:6B:D9:CB:87:74:6A:53:08:F0:94:95:A6:B7:76:91:94 Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Certificate serial: 018C9546DC243AE9C6D1531248DCFEDDB729 Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/QGeQymvZy4d0alMI8JSVprd2kZQ.roa Signing time: Sat 23 Dec 2023 06:04:58 +0000 ROA not before: Sat 23 Dec 2023 06:04:58 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64:ffff:0:18c:9546:8af6/128 maxlen: 128 2001:67c:64::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:95:46:dc:24:3a:e9:c6:d1:53:12:48:dc:fe:dd:b7:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c Validity Not Before: Dec 23 06:04:58 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=406790ca6bd9cb87746a5308f09495a6b7769194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:b2:38:91:c6:28:ef:14:70:db:9f:84:4c: d7:9e:6e:c5:1b:82:4e:45:28:51:d5:eb:30:91:b9: fb:4c:bc:d3:24:c5:f6:f7:62:8f:ce:26:2f:16:19: 63:44:6c:32:63:f4:c6:5c:13:1d:78:d8:8f:7b:00: dd:af:b1:8a:31:d8:77:4a:11:7c:13:a2:3d:be:12: e6:78:a1:b8:30:e9:32:03:da:45:b3:dc:cb:f0:63: 0c:a6:1c:6c:cc:4f:31:59:20:63:a8:56:f3:49:e7: 1b:4c:aa:a2:62:40:b6:02:75:17:f7:47:e0:02:e4: e3:87:aa:e2:41:ae:ee:f1:b0:b7:48:aa:cf:16:1e: 1d:2d:80:31:db:99:f0:18:54:48:2b:d4:3a:05:1d: a8:ba:51:bf:82:63:42:4d:e1:07:52:c6:9a:bb:80: 18:5e:dd:60:63:ff:51:fc:b7:d7:72:6a:ad:af:70: 54:20:6e:60:ab:df:f4:8e:46:36:74:6b:3f:e5:32: 3a:15:c0:c2:a1:64:fe:2c:12:1f:d2:47:c2:a8:7b: 3f:3c:e8:ad:78:1a:b2:2b:4d:37:15:e1:17:52:f2: 23:25:22:d7:df:51:be:7e:93:97:96:48:f4:a9:0f: 7e:0d:50:1b:42:a8:a1:6f:f8:8b:4e:4a:63:74:21: 79:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:67:90:CA:6B:D9:CB:87:74:6A:53:08:F0:94:95:A6:B7:76:91:94 X509v3 Authority Key Identifier: keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/QGeQymvZy4d0alMI8JSVprd2kZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 6c:73:0b:cc:07:7e:62:ea:b3:4e:fc:93:e1:fc:1c:b3:ac:1b: 4e:20:ea:80:56:cc:23:09:3e:22:b3:be:9d:ab:a0:b2:2c:10: 1e:19:f6:22:85:5d:e0:65:64:80:5c:50:97:62:dc:d0:55:cb: 18:72:1a:f3:8e:b0:b2:9d:1d:5e:a1:a4:e0:30:1c:90:81:6c: dd:c4:76:a3:c8:4e:ff:b6:c8:cb:8f:ae:d6:62:bd:cc:a3:32: 4e:b2:63:8f:6f:eb:18:a4:26:8e:09:42:07:96:30:a5:08:de: bb:7a:99:26:c8:d5:89:8e:5b:04:02:0f:51:f0:f3:14:67:0e: 3b:af:c5:c6:a5:4c:be:bc:ec:67:c7:4e:e1:cd:c6:6e:4f:63: ab:ed:03:c6:56:74:74:37:52:e7:fc:d9:e2:39:1f:41:9d:b9: 4c:5e:04:bc:44:88:c0:d0:c6:7c:4e:0c:43:17:25:ae:91:06: bb:de:f8:5b:07:9a:5b:e8:55:b3:fb:66:f4:7b:84:f7:76:7c: 08:3a:fb:38:23:0e:ee:f1:d0:52:82:42:f5:a4:60:95:d7:36: c9:b5:7f:1e:dc:1c:3a:5e:a1:cb:b5:60:05:1a:91:79:c8:92: f1:27:b5:3c:31:5f:3f:27:9a:7a:6e:50:07:d5:3d:4d:4b:d2: 5d:4a:07:e5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYyVRtwkOunG0VMSSNz+3bcpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm NzNmOGMwHhcNMjMxMjIzMDYwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDY3OTBjYTZiZDljYjg3NzQ2YTUzMDhmMDk0OTVhNmI3NzY5MTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZmyOJHGKO8UcNufhEzXnm7FG4JO RShR1eswkbn7TLzTJMX292KPziYvFhljRGwyY/TGXBMdeNiPewDdr7GKMdh3ShF8 E6I9vhLmeKG4MOkyA9pFs9zL8GMMphxszE8xWSBjqFbzSecbTKqiYkC2AnUX90fg AuTjh6riQa7u8bC3SKrPFh4dLYAx25nwGFRIK9Q6BR2oulG/gmNCTeEHUsaau4AY Xt1gY/9R/LfXcmqtr3BUIG5gq9/0jkY2dGs/5TI6FcDCoWT+LBIf0kfCqHs/POit eBqyK003FeEXUvIjJSLX31G+fpOXlkj0qQ9+DVAbQqihb/iLTkpjdCF5uwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEBnkMpr2cuHdGpTCPCUlaa3dpGUMB8GA1UdIwQY MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct YzUzOTc5ZDY2Y2E1LzEvUUdlUXltdlp5NGQwYWxNSThKU1ZwcmQya1pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1 LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGxzC8wHfmLqs078k+H8 HLOsG04g6oBWzCMJPiKzvp2roLIsEB4Z9iKFXeBlZIBcUJdi3NBVyxhyGvOOsLKd HV6hpOAwHJCBbN3EdqPITv+2yMuPrtZivcyjMk6yY49v6xikJo4JQgeWMKUI3rt6 mSbI1YmOWwQCD1Hw8xRnDjuvxcalTL687GfHTuHNxm5PY6vtA8ZWdHQ3Uuf82eI5 H0GduUxeBLxEiMDQxnxODEMXJa6RBrve+FsHmlvoVbP7ZvR7hPd2fAg6+zgjDu7x 0FKCQvWkYJXXNsm1fx7cHDpeocu1YAUakXnIkvEntTwxXz8nmnpuUAfVPU1L0l1K B+U= -----END CERTIFICATE-----Generated at Fri Dec 19 09:45:24 2025 by rpki-client